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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the application: 
Listing of Claims: 

1 1 . (Currently amended): A security apparatus for a wireless LAN supporting 

2 segregation of network traffic among a plurality of end stations , comprising: 

3 a plurality of e nd s tations; and 

4 a Public Access Point (PAP) component for providing a plurality of virtual Basic 

5 Service Sets (BSSs) a said PAP component configured to allow any one end station among said 

6 end stations to cause creation of a virtual BSS from within a singl e physical acc e ss point (AP) ; 

7 wherein any number of said end stations can belong to a- said virtual BSS; 

8 wherein said PAP appears to said end stations as multiple physical access points, 

9 one AP- access point for each of said virtual BSSs. 

1 2. (Original): The apparatus of Claim 1, said PAP provisioning a plurality of 

2 separate LAN segments while providing separate link privacy and integrity for each of said LAN 

3 segments. 



(Canceled) 
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4. (Original): The apparatus of Claim 1, further comprising: 
a plurality of PAPs; and 

a location-update protocol for updating forwarding tables of bridges that connect 



4 



said PAPs together. 
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5. (Currently amended): The apparatus of Claim 1, further comprising: 
a finebridging method for limiting communications between [[all]] said end 
stations that belong to [[a]]said virtual BSS. 
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1 6. (Currently amended): A security apparatus for a wireless LAN supporting 

2 segregation of network traffic among a plurality of 802.1 1 end stations , comprising: 

3 a plurality of 802. 1 1 end stations; 

4 a Public Access Point (PAP) component configured to: , s aid PAP comprising 

5 receive an association request from any one of said 802.1 1 end stations; 

6 and 

7 in response to receiving said association request, creating a personal 

8 virtual bridged LAN (PVLAN) instantiated into a virtual 802. 1 1 Basic Service Set (BSS^ 

9 wherein said personal virtual bridged LAN (PVLAN) is instantiated from 
10 within a single physical access point (AP). 

1 7. (Currently amended): A method for a secure wireless networ k to support 

2 segregation of network traffic among a plurality of stations, each of said stations having a 

3 hardware (MAC) address , comprising: 

4 creating a virtual 802.1 1 Basic Service Set ( virtual BSS) for a subset of said 

5 stations, wherein the step of creating can be initiated by any station in said subset ; 

6 a plurality of stations, each of said stations having a hardware (MAC) addr e ss; 

7 all said w herein stations in said subset belong to said virtual BSS sharin g and 

8 share a group security association[[; and]]. 

9 on e of said stations in said virtual BSS comprising a public acc e ss point (PAP). 

1 8. (Currently amended): The network method of Claim 7, said group 

2 security association of each station comprising: 

3 an encryption key and an authentication code key. 

1 9. (Currently amended): The n e twork method of Claim 7, wherein e xactly at 

2 least one of said stations in said virtual BSS is a public access point (PAP) for bridging an 802.1 1 

3 Wireless Medium (WM) and an 802.1 1 Distribution Syst e m Medium (DSM) . 
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